An approve-on-GitHub control for PR review artifacts is present behind CLAUDE_CODE_ARTIFACT, off by default.
The artifact-pr-review skill and template gained a third capability alongside the live staleness binding and decision pills: a pinned control that submits an approving GitHub review as the viewer.
- adds a
stamppayload field, aprr-stampJSON island, and a pinned approve script - when filled, the page shows a fixed control whose disclosure says it posts from the viewer's own account, after a click-time re-read confirms the head SHA still matches the anchor
- the script arms only if the read and write tools live on one connector whose display name matches
/github/i, the read declaresreadOnlyHint: true, the write does not, the write's name matches a positive create-and-submit-review allowlist, and every input value is one of the anchor's own identifiers or an approve word - the raw (non-composed) publish lane always keeps
{"stamp":null} - gated on artifact availability (env
CLAUDE_CODE_ARTIFACT/ gatetengu_cobalt_plinth, in-source fallback false, plus plan tier and theenableArtifactsetting); within that, the control exists only when the model fillsstampand publish validation accepts it
Posts an approving review of <code class="stamp-target"></code> from your own GitHub account, as you, if the branch is unchanged.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
tengu_cobalt_plinth Off by default, switched on for this accountThe shipped code defaults this off, and the flag server returned on for the one account this site reads on this version. That is the reading that makes the entry above worth a second look, and it still says nothing about your account.
This account: on · anonymous baseline: on · compiled default in v2.1.221: off
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.221. It isn't a statement about your account. What a flag value here can and cannot tell you
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
The code path no longer asks a flag before it runs.